I actually was wondering if anyone could help me out with the following problem:
Let's assume we are attacking the first
SubBytes() operation on AES with the help of a differential power analysis attack, for a DPA attack we need to know the plaintext in order to create the hypothesis and to apply the used power model (in this case Hamming weights) later on. The relationship between the simulation and the real power traces is calculated with the correlation coefficient. This is totally understandable from my side.
However, it is always stated that the known input value must not be constant because it will not yield in any result.
This is actually the thing I was wondering about. I came up with the idea that – in case that the values are constant – I will have the same Hamming weights for all my hypotheses. However, the real traces will still slightly vary in power consumption. Applying the correlation coefficient now will eventually lead in no correlation at all, hence yielding $0$ as the result.
Is this assumption correct, or am I thinking in the wrong direction here?
I already did some research on this subject, but was not able to find the right answer to my solution.